Data Protection

Who is responsible

The practice of Dr. Mohamed Refaai is the controller of the personal data collected through this website and at the clinics.

Health data is treated as sensitive

Under Law 151/2020, data revealing a person's physical health is sensitive personal data. Because of what this practice treats, we assume any contact you make with us is sensitive and handle it accordingly, whether or not you mention a symptom.

How it is protected

• The whole site is served over HTTPS
• Clinical records are held in an access-controlled system; staff see only what their role requires
• The website itself stores no clinical records — a booking request is a message, not a medical record
• No patient data is used for advertising, ever

Photographs

Photographs of identifiable patients are only published with that patient's written, dated permission naming this website. If you appear in a photograph here and want it removed, tell us and it comes down — you do not have to give a reason.

If something goes wrong

If a breach occurs that is likely to affect you, we will notify the Personal Data Protection Centre within 72 hours and tell you directly where the law requires it.